
$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
File: 2MHMikY6MVDL7AhlTmF4ANZuU-k.mft (raw, json)
Hash identifier: mVwvq+QMOwgalW0gv8evNwW4wYEjgkDAy1m2YlAzwgM=
Subject key identifier: 83:23:97:13:D9:8A:CC:B6:0F:DB:9A:D5:6D:59:11:87:E5:0A:BF:47
Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Certificate serial: 075E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
Manifest number: 074A
Signing time: Tue 28 Jul 2026 22:20:17 +0000
Manifest this update: Tue 28 Jul 2026 22:20:17 +0000
Manifest next update: Tue 04 Aug 2026 22:20:17 +0000
Files and hashes: 1: 2MHMikY6MVDL7AhlTmF4ANZuU-k.crl (hash: zeBWOAZd3hQSLp39+yPXo3Dyn2w28KHUqQPTAydVpnE=)
2: 88A31320809211EB938F4016C4F9AE02.roa (hash: b6E7DewMsW5No0gHoGWgtPqjqNVuvoeEo4AmJEYJ2S8=)
3: F00A66308A9C11EB9B2E044BC4F9AE02.roa (hash: Q7swCwzo9hJZ24gi07aIuTosZazuiPIGE4MruPYbUYg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 22:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1886 (0x75e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9
Validity
Not Before: Jul 28 22:20:17 2026 GMT
Not After : Aug 4 22:20:17 2026 GMT
Subject: CN=6a692b21-6bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:5c:bd:79:ab:ff:74:fc:5a:1f:68:67:86:
46:f2:ca:68:07:e2:18:14:77:00:a3:9f:77:f8:d6:
6d:e1:ca:71:b3:11:9e:77:29:c3:c9:3b:16:b4:8a:
34:8a:98:6e:21:75:56:91:65:81:15:9a:8a:8b:76:
37:2b:01:5f:32:af:af:58:2e:b4:37:b9:17:e1:5c:
6f:d3:ae:09:da:ac:12:0c:53:f4:62:6b:ff:c4:cb:
f8:38:77:67:ea:7a:40:57:1e:87:4b:83:5e:8c:b7:
68:85:d0:fa:00:3c:7c:a1:ff:98:be:91:29:26:49:
6b:bc:7e:a2:b5:14:39:27:ed:99:39:23:cb:3f:62:
7e:fa:65:51:3e:16:a2:c0:ed:ef:79:91:93:e6:7a:
68:06:48:48:54:cb:c5:9c:14:b2:aa:b2:12:11:6c:
13:f4:b2:e7:d5:71:0b:9b:51:fe:13:30:6b:30:94:
72:c8:09:9c:46:e1:24:c6:3f:1c:36:c0:b8:25:37:
b6:2a:e1:03:0e:08:36:48:07:1a:15:f8:37:d0:ba:
d8:58:37:d1:26:0e:16:52:4a:c7:5e:ff:6f:f1:9d:
25:8d:ca:da:33:8a:9e:b2:eb:60:37:34:94:3a:e1:
9c:7a:ab:8a:45:f6:31:ca:88:e9:7d:a1:44:bd:7c:
cc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:23:97:13:D9:8A:CC:B6:0F:DB:9A:D5:6D:59:11:87:E5:0A:BF:47
X509v3 Authority Key Identifier:
keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
59:a0:e7:3c:d7:b8:87:3c:d3:fe:53:14:73:f5:30:5d:e6:6e:
5f:c3:cc:c9:11:0a:78:6e:cc:32:07:95:ba:8d:20:5c:53:f9:
71:9d:f5:33:43:f6:0f:df:65:fd:e2:6d:02:de:a8:77:a1:d3:
6d:19:c0:63:d8:90:d4:aa:05:19:81:5f:bd:10:2d:bf:88:df:
b8:d3:5c:49:f5:8f:7b:86:52:b3:d8:10:60:b2:fd:27:fb:e6:
e8:27:bc:26:bf:12:9e:25:f3:90:1e:b0:bc:ef:d8:bb:68:c9:
b9:0d:df:93:39:56:2d:00:65:5c:89:11:34:bc:a7:fd:f1:00:
bb:97:fa:b0:60:ea:73:22:68:d3:76:5b:ae:ac:24:ef:a8:bd:
e2:6d:2d:88:fd:28:07:98:f9:27:bb:9a:d9:89:27:5c:f3:8e:
9f:63:6c:6e:de:d9:a2:f7:f1:05:7c:5e:21:8a:be:21:ff:fe:
11:f3:1d:ef:08:88:68:93:60:65:27:37:1a:47:36:d3:19:c2:
38:a8:0c:67:dd:25:70:5f:5c:1a:df:cb:70:33:ff:d4:c0:9f:
a2:ed:c8:e1:1b:d9:87:f8:ae:c9:2b:a1:9a:f2:43:2b:19:0c:
e6:ec:9f:4f:50:f5:43:d5:17:3f:05:c3:81:b1:1e:bf:4b:86:
30:4a:7a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:10:12 2026 by rpki-client